high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | July 2006 (4.07) |
| Protection available since | 19 May 2006 09:22:56 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Khoobe-B is a Trojan for the Windows platform.
When first run the Trojan copies itself to \Arquivos de programas\Messenger\msnmgr.exe and creates the file <Windows>\wmedia.dat. The file wmedia.dat can be safely removed.
The following registry entry is set:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSN Messenger
\Arquivos de programas\Messenger\msnmgr.exe
The Trojan logs keypresses entered into certain windows such as Internet Explorer and MSN Messenger applications. Stolen data is sent to a remote attacker.
|
